WIPS PIView 3.3.1.8 





(19) Lfl £r2J^=rcH S(KR; 




V 1 ^/ o -^n — 1 en o zn 


(51) Int. CI. 


(11) 53Ham ^2000-0012131 


H04L 29/06 


(43) ^DmJ^ 2000t^02^25S 


\£. I i 5 CZ .at. 


10-1999-0031537 


(22) 


1999^07^31^' 


(30) 


9/127.769 1998^^07^31^' 01 ^(US) 


(71) 


EllB^eiXI^ 2J3 








000-000 




□ li^e^ WeilOl m DF^EI OHOI^ eOO (^aaS : 07974-0636) 


(72) 


till^^^lOIZlOfS^. 




□1^ 
















□ |^.^JilXI07045.S^^.^'eHeiiei34 


(74) ciiaiei 


Ol^s 


(77) ^h\^^ 


OH ^ 


(54) 





IIH^?-IH H^seOil SiOlAi. SiM HfEKparty) 2|2|0| X|4- 5sJo^^ :>ll<ii 52^^01 3\m ^^^O. y\t^ ^3f5J ^^^Oil 2i 

2| EfEJ^ DMSj ^ XI4^ DH^^-I^S ^:>h£[P. EfEIOil Dial 2^3^ 2im HfEIOll S|6H ^^iSj^, OB 

HIEJ^e^Oil ^01£ i:?HSj ?||^^ ^^21 oHAIM ^^o\3\ ¥I6H Cf^ ^AIOIIOIIA^ A^gElUjS sk:^. gHAi:?^ ^^£1^. lUEJ 

Oil a^s ^nfe Mgo^oi 9IM ^^'ehci. 

□ SEE 
E3 

^&J01 

e<e 31. S6i se^ xh^ 

SE IB PH-S&f 51 ^SfCDiffe-Hellman key agreement)0|| 2ie[ me^jaSf 2^ 2^2J e^M SAjof^ S^. 
£E 2^ CIH-iiSV SSsJ 51 HSSgOil WtB UIM^BS^ 2^' 2l2i eiye SEAI^^ 

£ 3g S ^^S2| ^'AIOII 1011 SSf S]<y/XI^^ §• e^is gs[ mM?-l32f 2^ ^XH2.^2| SiMg 2A|6hfe 2^. 

2 4^^ ^'AIOII 20il SSf SItf /Xl^ ^ 2^'M gs[ UIM^-IBSf 2^ ^7^219\ m^m 2A|oh^ 2S. 

2 5^^ ^^soii ^'Aioii 3011 2joh g<:i!<y Sti 2^'m etf uiM?-ia2^ 2^ ^xhzisj m^m 2Aim^ 2^. 

10 : mM?^a 30 : Slf Uiy/XI^^ #>ii>M 

20 : 2^' 

P. 



2001/11/29 



1 



WIPS PIView 3.3.1.8 



9l2.0i, "over the air service provisionino"{OTASP)os &5£|I2 2iD. ruii-^i^r-i -r-^ tt- jgoj 

aetg £ES[ 2S Sfei q/HLiEl Sg|(off-line dictionary attack)S| :)^^S2 StlQ g^AjgJCf. DH 91 

..aCloltlUltm^odpml'^re.^"^^^^^^^^^ modprR.e.,^.-..p. UIM 

sPr!')! 2;f2r«;^^rs ''24:i^%ii(?)t^4^^^^^^^^^ ^-r • ^^^^^^ ^ 

™ KS^2 ML°if™^^- =^(20)0)1 SSap. 2a(10)S y^(R. 

'» 201 ms?4a(io)o« siss R^'^f e^jo, (pi 2^(20)011 o,5„ gglp " ^ "^^ ^'^ ^i^^*^^^- 
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^oii 9Jio\M, ^ me\m^ nms\ 2^ xm^§,^4=oii nH:^?-iEM ^d\^o. §^ maioii °j6h oiej 21m ^^^^ ub lUEioii hioH ^sjae, ^ 

asi jHy^ sEt^ ^[Ejseioii a^s ^iois i:?h2j ^nf 6HAi(hash)s ^mo\D\ am ^AimmME: ai^^h sip. Deiu 
9ie aa. 01 mtiowM^ 3\m ^hspi oiaoii seiM ^xfm fligmn siD. 

£ 3^, 2}^/x\^ m^i^(30) ^ ^ ^'Aioii 1011 s\m 2^(2o)g Afem^. LiiM?-ia{i)^>M s^'si^ (i) uiM?-ia H^d^oicnsf 
uiM?-ia(io)2f. (2) e^' zisi mtiim ^^mo. sai^ u\2^^o\, m^/xi^ mMm30}m mmM, e^' ^xh^ Liie?4B(io)oii 21m 
§s(o!iaa, 3fe(biiiing)g tim xiigs^a. ui^?-iB(io)::»^ 21m §se ^eja^s, ui^^-iado)^ m^/x\^ mtdm 

30)m mmM ^xim:>\\ 4 cixi^oj im>,o,c(p)= jings^p, dbhu. hh^^-iecp)^ 4 pzim oi^^oi:hu 3 oisf^' 4- 910. 

□eoii. e^' ^xife 01 iiH>i^2(p)M Hszi^si ^^2^;^ e^'(20)oii e^'(20)^. Me3K)i. b^^crm) 

m m^mn. A^aO|| 512 dieoj 4:4.(p)2f ^4-(p)0|| SISH ngSI ^^2!(g)^ AFgoFOI ((q'^Rm +p) mod p)M :fll^^e^CI. 

e^(20)S ^^^(p)2f ^^^(g)M ((q'Rm +p) mod p)3f U1^?-IB{1 0)011 S^e^Q. ((q'Rm +p) mod p)^ ((g"RM mod p)+(p mod p)2f 
§:3^0|:^1 lOlEOll m^^^adO)^ II}1±?-IH(P)M ei^oH} (P mod p)2f ((q^Rm mod p)M ((q^Rm +p) mod p)^¥EH :^l<^^£^a. y4^(RN)» 
m^sh Li|e?|B(10)^ (q'Rm Rn mod p)2f (g"RM mod p)M Ul^?-ia(10)^ (g^Rw Rn mod p)2f, 3^21 5HAI SE^ B 

^'^M AlliS 5|(SK)^Ai i^iHehQ. OjlgjCli. IS41 H^S^M ^^^a^^. (g'Rw Rn mod p)£| ^Oi£ 64 2io^^ d|M::?F A||<^ 9I(SK)^/H M 

5!oia. 

aeoil. UIM?ja(10)^ ((g'^Rw +p) mod p)m 5||<i^6^01 2^(20)011 S^s^a. e^(2)g. (g"RN mod p)S (g'Rw Rn mod p)2f e 

:?^ej (g'^R 

N mod prRw e ^l<^L^^^a. e^'(20)^, L11M?-|B(1 0)011 A12f ^^01. (g^Rw Rn mod p)2f. n^SJi 5HAI. SE^ Z1^5J A||<M 5!(SK)^A1 tis! 

^^Q. Oil^Q. IS41 H^MMe if^me. B\(SK)^M (g"RM Rn mod p)B\ ^01£ 64 il6^^ bl^:?^ ^OjCf. 

LilM?4a(10)2f 2E!(20)0I All<!^ 9|(SK)M A||>^ 3|(SK)^ A B\^M MBSiD{\ £112, 2^(2)3f LilM¥-IB(10) ZfBI S<yOI A3I 

^^^e[ g ^^S\ ID^^ DH-EKE H^MgOl SSM ^#of^ §£011 tiloH §MM V#6FX1 nH:^?-IH 2 3S| ((g'^ 

Rm +p) mod p)2^ ((g"RN +p) mod p))m A^gt^D. SE^f. Ol 1IH^?-J2 H^SM^ IIH::i^?-IE2| ^^^'32 V^£J^ ¥5i::'f Si:^! 

(Hi^Oll o^2£^Cf. Rm 3f Rn ^ y4^0IP. 01^ y^M g^ Xf^om mod p^ i,^<iL^o^^. mod pOll 21311 ^^'£1^ ^^(premuta 

tion)^ ejo^OI ^^B\ mo. HEWM, P mod om B 4^011 ^Dm^ B §£(^andomness):)^ ^o^Xl &^:H1 £iB. 

QB m±mE:9\ ^>^'£icHei£ mB\^9,^ ^^om s\o\ sasj ^mm ^x\m ^ aia, saxfa^a ^^^e^ mir^^-iH 

£^01 §s2i go^oii ^£[£1^ 5!^ ohys 4^ aie aoia, ojiaoi. oi dh:^^^^ nssgg soeiei (entity) ej^a^ aii^ ?i 

f?2foii ^mm 4^ SIP. 

0|o^011A^^ ^ mgoj ^.;,|oj| £ 4011 a\o\0\ ^SelP. £ 4^ B ^^S2J ^'AIOII 2011 mB, Sl^/Xl^^ e<y<y(30)I]| 2^(20)e gt[ m 
e?^B(10)2f 2^ ^Xl ei21 2AimB 2iP. 2A1^^ bF£[^^0|. Ssf fil<y/Xl^^ m^^{30)m mo[0\, 2^' ^Xl^ UI^?-IB(10)01I ois 

§se xllst^p. me^BdoiJF oje ^eiSFs. 2^'(20)B 2^2j ^:?i mt} m m^s.M si=?m ^^s3^°s. ^D\m §x^9^ 

OIOIXMI 9P. 

U1M¥-1B(10)^ y4^(RN)S ^'mm 2^(20)011 (g^RN mod p)M S^e^P. 

2^'(20)3[ UIM?4B(10) gfXf^ ^Xl£i eSL^ oH^'(Hashing) ^^B£l§(SHA)g A^go^01 (g'^Rw +p) mod p)2^ (g'^Rw mod p) ^^2| Si^^ SHAI 
21. h((g"RN +p) mod p). (g'Rw mod p))» ^SehP. BSHP, DIE! 3H^ ^^Bdl^^ A^gl^ 4^ Slge ^£^6^el. 2^'(20)^ 8HAI2J 

sAioni, 2gj ^xib. as^ s\^/x\^ m^imsom mm. shaisi ciximm mM?-ia(io)oii a^eip. 

UI^?4B(10):'F 2^' ^XiOll 21611 PXIM2} UIM?IB(10)01I 21811 ^6H2I aHAI2f2J ^'XlS m^oig^^^ saiqI Se^lB A5|:7^ (g^Rw Rn m 

od p)2f B oHAI 2^ B ^'¥^>M m^SiJW QP. ^, Olg^ll ofOl 2^(20)^ A3\m £|B. UIM¥-IB(10)^ mMD[ SeS^ S¥ 01 

A B\m 2^(20)01ie^ S^^AI^' 3ii0IP. 

Q|OF2jog ^Aldl 3e. 2^ ^Z-l(20)fe. 2^»(20)3f S^IT 4^ (g'^Rw +p) mod p)M g6l2SA1 2^1? 4^ ai2^. SUe §e2^ S 

m, secdiacH. 2^'2i eis e)M Liieo|3{io)oii ss§^p. 

01 ^'AlOll 3^ Wr^^aiOl ^' ^{birthday attack) 3f m^^0\ 9JiQ. ^. 01 R^^mm laJ 01^^ S^'oHO^y 2H-2i-P-D!M(man-jn-the-mi 
ddle)011 2JoH A12£i^ ^ ^SIOl PPPB SiP. BSIU. ^AlOll 32J Q21^21 011011 216^^. oHAP^ hCCg'^Rw mod p). (g^Rn mod 

P), (q"Rm Rn mod p))S S^OIL SgJXf^ 6HAIM A^go^Oi ^^oFXI Si^^g cigpi nHgOII. SSOl BH XI^QZHI SP. 

^♦Aioii 321 QB □eh^ei oiisAi^, 2^(20)3f ui^?-ia(io) 2}9\ m^m seo^:?l 9\m oHai:?k 2^(20)21 sias sssf^ 

5^01 2iP. 

^AIOII 321 2PE ^gOlK^, ^ ^'S2i ^'AlOll 4)011 2|SFe. 2^'{20)B, 2 4011 2AI& b^2^^^0|. mM?43(10)^¥E1 (g'Rw mod p)M 
s.^ ^0110^ (g'^RM mod p)M mM943(10)01l £!^^^P. ^•A|0||30il S^OIAI^. SH-oj-CH-Oie m^JiD\ (q^Rm mod p) 2^ (g'^Rw 
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p)m mmm?i ^a. oiaie sgjxjai V^y jh^^/q 2-(20)oi (g mod p)o)i sBoh:>i son (g-p^ mod 

:'^ Qim gae ^ejsffe s^oiife, ejg ^eHS sjoici. ^'--^3(10) 
2im g»t as iBEioii cHoH ^:>\m r=?s a^mfe eai(20)2^ ms?ia(io) m smoti/H jn-s-og gaHsa. 

WlM^a(,0)^DlTgV3r(.^s|(2of^^^^^^ modp)g^,^.t.^. (g-^R. mod p)M U,e^^B(10).. ^^^.p. 

PS 012.^^0, oiis/Hte. as(20)3f m-^^ado) i^s, gggp, ^g„ ^g^^^ 2^^(2)21 asm- -01 

^^^^ 

iii^iiiiiiiiiiPHEs^-^ 

(57) g^l 

(a) ^:»| Xi\ 1 EfEIOIlA^. XII 1 y4=(RM)M mm\^ B^l; 

(b) ((g-R 
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" + P) mod p)M :^\^o\0i m 1 ^l^m ^^o\^ &J{\^M. 0\D\M Pfe 1IH±^H0|I2. pfe gfe tii^(p)m 2JoH 

iieaj ^^^ei 

(c) ^Ol :^^(p). ^^ZJI ^^^{g)3l XII 1 Jll 2 HfEjOll ^i^oF^ 

(d) ((q'^Rn + P) mod p)2f M 2 2 HfEI^^Q 4^^o^^ ^^\^M, Rn ^ ^11 2 ti^^ei 4^<M e:^ll: ^ 

(e) ^oi ;gi 2 :«l<^l^ ^3f2f ^oi i y4^oii :>i^o^oi dim m^o[^ &D\\m ss^m^ 
^=?m 2. 

Ji\ 1 1>^01I 9iO\M. BMe)^: 
(el) (P mod p)M D\\t^o\^ 9:>II: 

(e2) ({q^Rn + P) mod p)2J ^^:?| Xll 2 (P mod p)S ^'^o\0\ {q^Rh mod p)S e:?ll: 

(e3) (q'Rn mod p)£f ^^i:*! XII 1 y4=0jl :?l^o^Oj ^^31 ^iloFfe BD\\m HSo^^ g>^S. 
^^i>^ 3. 

M 1 soil SiOiAl. m 1 lUEIfe ¥<y S^il A|>iijO|l/d2| 2^0112 HI 2 HfEi^ Uje^^Boj g^m 
4. 

XII 1 soil 2i01/d. 3:>!l(b)^: 

(f) ae.^ xh^^ mm 21m see xii 2 mEioii a^a^^ b:»ii; ^ 

(g) m 2 mEJiD[ 21m §MM ^2inm xii 2 iUEis¥Ei §<y ss^ xHye esH ^:?i ah^^-iem bdwm ch ssm 

HI 4 soil 9JiO\M. HI 1 HfEl^ gi^ A|>iijO||>MSj ^XHOIH ^:?| HI 2 lUEl^ Uie^^BOIOi. ^91 XH^^ Xl^ gi^iy 
6. 

HI 1 nfEioii/d iH^^-iEM Amo\o\ d\m ^^o\\ 9io\m, 

(a) HI 1 HfEIOllA^, 4i4^{p)2f. 2jaH ^^^£1^ ZlgSI ^^^(g). ^ HI 2 IlfEI^^EiSJ HI 1 4^>ii5^^ B:){\^M. HI 

1 :«l^^ ((g'^RM + p) mod p)2i ?ji<y ^3foioi. oi:?iAi p^ m±9^^, Rm ^ H1 1 y4^ej ^Oj ^^<M 

(b) HI 2 y4^(RN)M mmm^ 3511: 

(c) {(g"RN + P) mod p)M 5Il^JoK)1 HI 2 ?ll<i^ ^HfM ^So^fe B5j|: 

(d) HI 2 mEIOII HI 2 3116^ S^offe B:fll; S! 

(e) ^:3i H1 1 ^2f2f ^:?i HI 2 y4'0ii :?i2oK)i 9IS s^iio^^ BDwrn ssm^ gis. 

S^S7. 

HI 6 soil 2i01/d. ifer:?l B?ll(e)fe: 
(el) (P mod p)S 

(e2) (g'^RM + P) mod p)£i ^:)\ HI 2 ^3fS^El (P mod p)S ^'^o\0\ ((g'^Rw mod p)S =i^o\^ BD\\: ^ 
(e3) (g"RM mod p)2f HI 2 ^4^011 D\^o\0\ d\m m^n\^ 3:fllM SSm^ g^g. 
S^S 8. 

HI 6 soil aiCHAi. ^91 HI 1 mEi^ ¥iy A|>igi01IAi2j U|e?.|aOII3 HI 2 HfEl^ e^&J g:^^. 
S^S 9. 

HI 6 soil ?JiO\M, B^I(a)°J 012011: 

(f) ^Ol HI 2 HfEI^^El xH^M mm 21m §MM 4^<:i]5F^ &:?ll: ^ 

(g) ^oi ^^:»i hi 2 niEioii ^01 s<m eo^ ^h^^ nH>i^.iEM s^s^^ 3:>jis ch sso^^ g^s. 
^?s 10. 

HI 9 soil SiOiAl. ^:?l HI 1 m£l^ Al^^iiOllAiSI UI^?iaO|I2, &OI HI 2 IlfEl^ ^Xi21 m^. 
§?S 11. 

H1 1 iifEioiiAi B\m m^o\:)\ 9io\m. 

(a) ^:>\ HI 1 DIEIOIIAl, HI 1 y4^{RM)M B:A\\ 
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(c) &OI HI 1 3)|<y ga^s jii 2 DtEioii g^sffe. 

(d) (g-^R. . P) mod 0)21 m?i2i HI 2 ^j&m feoi HI 2 mEis^Ei ^iiohfe BfliSAi. o):.i/d R. 2 HI 2 y^ej ^^1 B^l: 

(e) siOiE Hi 1 3l|if g3fo| HI 1 6«AI(hash)g 3)|^fSife B31I: 
(0 ^':>\ HI 1 8HAIS HI 1 S6! ^2^ flj^S e8HA| ^:)\ HI 2 IVEIOII S^Sfe B3l|: ^ 

(Q) fe^:'! H1 1 y4=2f 6t:)| hi 2 3ll^^ 22foii Jissfot 9IS smsffe Bnm assife gig. 

12. 

M 11 &OII OJ01AI, (h) HI 2 ao^ aiyg gsH^ 2 meioii o,g g^g ^^sit b^is a zmom. 

B51l(d)&, &UI §a^^ ^51 HI 2 IlfEIOII °|8H $2i£|fe i^I'l HI 2 fl|,M g^g ^^iSffe gfg. 

^=?m 13. 

fli 12 soil 0^0,;^. B?ii(h)fe ^?i H1 1 njEioii am ^^nm 401 o,g ga2f &3ii a^sjii; 
^:'i B:>ll(d)fe B3ii(c)oil a^Ai S6||ii:hu ^3| B^i(c)a SAidi gsHxife sa. 

S^S 14. 

»i 13 soil s^oiAi. Af:,| B?ii(c)fe ^:>i a3ii(d)°i oi^oii samife gfs. 

15. 

xii 14 ifoii 2^o^A^. feoi B?ii(h)fe HI 1 nmoii mm ^gxig ^^1 sjs sesf sdii s^shj: 

^^1 B^l(e)fe ^^OiE ^,1 HI 1 ^1^^ g3J£| oHAia &0| HI 1 HfEIOII CHif ^P| -gXfSAI feO| HI 1 8HAIS ^Kysife gfg. 
S^S 16. 

m 14 S(^l S(OI/H. ^Pl B31l(e)fe HI 1 ^ HI 2 (g^R, mod p)'^R. Si oHAI^AI ^Ol HI 1 SHAIS ^|<,^o1fe gfS 

S^S 17. 

M 11 Sdl 2iO|A). ^^1 B^l(e)fc ^0|E HI 1 ^ HI 2 ?ll<i^ 8HA|^/H ^P| HI 1 6HAIM ?||<i^o^- gfg. 

S^S 18. 

M 11 soil ^OIAI, &OI HI 1 HIEIfc A|^a'01IA1°| sm SH0|3 &0| hi 2IIfE|fe LIIS9I32! gfe. 
S?S 19. 

HI 1 HfEIOIIAJ 3\m ^HoF:?! ^le^ gfsoil ?lOiM. 
(b) HI 2 y=^(RN)» if^ohfe b:>ii; 

(C) (g'^RN mod p)M ?ll<ySK)l HI 2 :»1l(y «g«6ffe B31I: 

(d) 6t:3i HI 2 3ii,y gjfg Af:,, ^ ^ iueioii s^sffe b:)||: 

(e) 2!CHE ^:)| HI 1 l\m g2fo| HI 1 oHAIM y&i^t\^ B?ll: 

(f) HI 1 eof xHyg S6N ^:»l HI 2 WEISVH HI 2 8HA|g ^'tMSIfe B31I: 

(g) 6f:J| HI 1 ai HI 2 8HAI0II 3|S3K)1 ^:?l HI 2 mEIS SSSJfe B3)l: S! 

(h) HI 2 HJEI^h SSEIfe 3^ HI 2 B^a ^J| HI 1 3||<i» S2f01l ^|SSK« 9|g imsf- Bfll. SSSIfe g. 
S?S20. 

HI 19 soil SiOiAi, (i) HI 2 SB fll^^ SSH/d ^?l HI 2 WEISVEi eJS SSg ^'dloft B3IIM Gi SSof2. 

Bfll(d)fc ^:>| BS §a^h SBSIb 3^ HI 2 HfEIOII Hi 2 3)16? g2JS S^Sffe gfS. 
S?S 21. 

XII 20 soil sjoiAi. e3ii(i)fe A}:,, j^, 2 nfEioii piif .^^i o,g g^a gjii 

B3ll(d)fe fet:"! B31l(a)0il SiAi SSHXIJiU ^?i B?ll(a)2f SAIOil goHXife gig. 
S?S 22. 

Jll 21 soil 2iO)A). Af5, B3ll(a)fe B5ll(a)2| Oj^OII SISHXIfc gfg. 
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Jil 22 mm 2iCH/H. M 2 niEioii Qi§[ JtM 2im §S2f mm 

24. 

HI 22 §[011 2iOi/H. 37il(e)^ J\\ 1 5k! «l 2 ^MS^ (o"Rm mod prRw SI ^Al^/H Ji\ 1 SHAIg 5||^Ltot^ gJS. 
S^%^25. 

»l 19 soil 910\M, 35il(e)^ ^Oi£ m ^ ^ 2 ^3f£J SHAISAi M 1 ^AIM 51I^L^6^^ g^s. 
^=?m 26. 

1 
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